@cloudflare/sandbox 0.0.0-46eb4e6 → 0.0.0-485cf61
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +0 -6
- package/Dockerfile +82 -18
- package/README.md +89 -824
- package/dist/chunk-3NEP4CNV.js +99 -0
- package/dist/chunk-3NEP4CNV.js.map +1 -0
- package/dist/chunk-6IYG2RIN.js +117 -0
- package/dist/chunk-6IYG2RIN.js.map +1 -0
- package/dist/chunk-HB44YO2A.js +2331 -0
- package/dist/chunk-HB44YO2A.js.map +1 -0
- package/dist/chunk-KPVMMMIP.js +105 -0
- package/dist/chunk-KPVMMMIP.js.map +1 -0
- package/dist/chunk-NNGBXDMY.js +89 -0
- package/dist/chunk-NNGBXDMY.js.map +1 -0
- package/dist/file-stream.d.ts +43 -0
- package/dist/file-stream.js +9 -0
- package/dist/file-stream.js.map +1 -0
- package/dist/index.d.ts +9 -0
- package/dist/index.js +55 -0
- package/dist/index.js.map +1 -0
- package/dist/interpreter.d.ts +33 -0
- package/dist/interpreter.js +8 -0
- package/dist/interpreter.js.map +1 -0
- package/dist/request-handler.d.ts +18 -0
- package/dist/request-handler.js +12 -0
- package/dist/request-handler.js.map +1 -0
- package/dist/sandbox-CtlKjZwf.d.ts +583 -0
- package/dist/sandbox.d.ts +4 -0
- package/dist/sandbox.js +12 -0
- package/dist/sandbox.js.map +1 -0
- package/dist/security.d.ts +35 -0
- package/dist/security.js +15 -0
- package/dist/security.js.map +1 -0
- package/dist/sse-parser.d.ts +28 -0
- package/dist/sse-parser.js +11 -0
- package/dist/sse-parser.js.map +1 -0
- package/package.json +11 -5
- package/src/clients/base-client.ts +297 -0
- package/src/clients/command-client.ts +118 -0
- package/src/clients/file-client.ts +272 -0
- package/src/clients/git-client.ts +95 -0
- package/src/clients/index.ts +63 -0
- package/src/{interpreter-client.ts → clients/interpreter-client.ts} +151 -171
- package/src/clients/port-client.ts +108 -0
- package/src/clients/process-client.ts +180 -0
- package/src/clients/sandbox-client.ts +41 -0
- package/src/clients/types.ts +81 -0
- package/src/clients/utility-client.ts +97 -0
- package/src/errors/adapter.ts +180 -0
- package/src/errors/classes.ts +469 -0
- package/src/errors/index.ts +105 -0
- package/src/file-stream.ts +119 -117
- package/src/index.ts +81 -69
- package/src/interpreter.ts +17 -8
- package/src/request-handler.ts +61 -7
- package/src/sandbox.ts +698 -495
- package/src/security.ts +20 -0
- package/startup.sh +7 -0
- package/tests/base-client.test.ts +328 -0
- package/tests/command-client.test.ts +407 -0
- package/tests/file-client.test.ts +643 -0
- package/tests/file-stream.test.ts +306 -0
- package/tests/git-client.test.ts +328 -0
- package/tests/port-client.test.ts +301 -0
- package/tests/process-client.test.ts +658 -0
- package/tests/sandbox.test.ts +465 -0
- package/tests/sse-parser.test.ts +291 -0
- package/tests/utility-client.test.ts +266 -0
- package/tests/wrangler.jsonc +35 -0
- package/tsconfig.json +9 -1
- package/vitest.config.ts +31 -0
- package/container_src/bun.lock +0 -76
- package/container_src/circuit-breaker.ts +0 -121
- package/container_src/control-process.ts +0 -784
- package/container_src/handler/exec.ts +0 -185
- package/container_src/handler/file.ts +0 -457
- package/container_src/handler/git.ts +0 -130
- package/container_src/handler/ports.ts +0 -314
- package/container_src/handler/process.ts +0 -568
- package/container_src/handler/session.ts +0 -92
- package/container_src/index.ts +0 -600
- package/container_src/interpreter-service.ts +0 -276
- package/container_src/isolation.ts +0 -1213
- package/container_src/mime-processor.ts +0 -255
- package/container_src/package.json +0 -18
- package/container_src/runtime/executors/javascript/node_executor.ts +0 -123
- package/container_src/runtime/executors/python/ipython_executor.py +0 -338
- package/container_src/runtime/executors/typescript/ts_executor.ts +0 -138
- package/container_src/runtime/process-pool.ts +0 -464
- package/container_src/shell-escape.ts +0 -42
- package/container_src/startup.sh +0 -11
- package/container_src/types.ts +0 -131
- package/src/client.ts +0 -1048
- package/src/errors.ts +0 -219
- package/src/interpreter-types.ts +0 -390
- package/src/types.ts +0 -571
package/CHANGELOG.md
CHANGED
|
@@ -1,11 +1,5 @@
|
|
|
1
1
|
# @cloudflare/sandbox
|
|
2
2
|
|
|
3
|
-
## 0.3.4
|
|
4
|
-
|
|
5
|
-
### Patch Changes
|
|
6
|
-
|
|
7
|
-
- [#86](https://github.com/cloudflare/sandbox-sdk/pull/86) [`feafd32`](https://github.com/cloudflare/sandbox-sdk/commit/feafd32a51f50dfaf4994bddcbfb56d46cada622) Thanks [@ghostwriternr](https://github.com/ghostwriternr)! - Fix session reuse to reuse existing healthy session
|
|
8
|
-
|
|
9
3
|
## 0.3.3
|
|
10
4
|
|
|
11
5
|
### Patch Changes
|
package/Dockerfile
CHANGED
|
@@ -1,6 +1,64 @@
|
|
|
1
|
-
# Sandbox
|
|
2
|
-
|
|
3
|
-
|
|
1
|
+
# Sandbox container image with full development environment
|
|
2
|
+
# Multi-stage build optimized for Turborepo monorepo
|
|
3
|
+
|
|
4
|
+
# ============================================================================
|
|
5
|
+
# Stage 1: Prune monorepo to only include necessary packages
|
|
6
|
+
# ============================================================================
|
|
7
|
+
FROM node:20-alpine AS pruner
|
|
8
|
+
|
|
9
|
+
WORKDIR /app
|
|
10
|
+
|
|
11
|
+
# Install Turborepo globally
|
|
12
|
+
RUN npm install -g turbo
|
|
13
|
+
|
|
14
|
+
# Copy entire monorepo
|
|
15
|
+
COPY . .
|
|
16
|
+
|
|
17
|
+
# Prune to only @repo/sandbox-container and its dependencies (@repo/shared)
|
|
18
|
+
# The --docker flag generates out/json and out/full directories
|
|
19
|
+
RUN turbo prune @repo/sandbox-container --docker
|
|
20
|
+
|
|
21
|
+
# ============================================================================
|
|
22
|
+
# Stage 2: Install dependencies and build packages
|
|
23
|
+
# ============================================================================
|
|
24
|
+
FROM node:20-alpine AS builder
|
|
25
|
+
|
|
26
|
+
WORKDIR /app
|
|
27
|
+
|
|
28
|
+
# Copy pruned lockfile and package.json files (for Docker layer caching)
|
|
29
|
+
COPY --from=pruner /app/out/json/ .
|
|
30
|
+
COPY --from=pruner /app/out/package-lock.json ./package-lock.json
|
|
31
|
+
|
|
32
|
+
# Install ALL dependencies (including devDependencies for build)
|
|
33
|
+
RUN npm ci
|
|
34
|
+
|
|
35
|
+
# Copy pruned source code
|
|
36
|
+
COPY --from=pruner /app/out/full/ .
|
|
37
|
+
|
|
38
|
+
# Build all packages (Turborepo handles dependency order automatically)
|
|
39
|
+
# This builds @repo/shared first, then @repo/sandbox-container
|
|
40
|
+
RUN npx turbo run build
|
|
41
|
+
|
|
42
|
+
# ============================================================================
|
|
43
|
+
# Stage 3: Install production-only dependencies
|
|
44
|
+
# ============================================================================
|
|
45
|
+
FROM node:20-alpine AS prod-deps
|
|
46
|
+
|
|
47
|
+
WORKDIR /app
|
|
48
|
+
|
|
49
|
+
# Copy package files from builder
|
|
50
|
+
COPY --from=builder /app/package.json ./package.json
|
|
51
|
+
COPY --from=builder /app/package-lock.json ./package-lock.json
|
|
52
|
+
COPY --from=builder /app/packages ./packages
|
|
53
|
+
COPY --from=builder /app/tooling ./tooling
|
|
54
|
+
|
|
55
|
+
# Install ONLY production dependencies (excludes typescript, @types/*, etc.)
|
|
56
|
+
RUN npm ci --production
|
|
57
|
+
|
|
58
|
+
# ============================================================================
|
|
59
|
+
# Stage 4: Runtime - Ubuntu 22.04 with full development environment
|
|
60
|
+
# ============================================================================
|
|
61
|
+
FROM ubuntu:22.04 AS runtime
|
|
4
62
|
|
|
5
63
|
# Prevent interactive prompts during package installation
|
|
6
64
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
@@ -48,9 +106,9 @@ RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
|
|
|
48
106
|
&& apt-get install -y nodejs \
|
|
49
107
|
&& rm -rf /var/lib/apt/lists/*
|
|
50
108
|
|
|
51
|
-
# Install Bun from official image
|
|
52
|
-
COPY --from=bun
|
|
53
|
-
COPY --from=bun
|
|
109
|
+
# Install Bun runtime from official image
|
|
110
|
+
COPY --from=oven/bun:1 /usr/local/bin/bun /usr/local/bin/bun
|
|
111
|
+
COPY --from=oven/bun:1 /usr/local/bin/bunx /usr/local/bin/bunx
|
|
54
112
|
|
|
55
113
|
# Install essential Python packages for code execution
|
|
56
114
|
RUN pip3 install --no-cache-dir \
|
|
@@ -59,25 +117,30 @@ RUN pip3 install --no-cache-dir \
|
|
|
59
117
|
pandas \
|
|
60
118
|
ipython
|
|
61
119
|
|
|
62
|
-
# Set up container server directory
|
|
63
|
-
WORKDIR /container-server
|
|
64
|
-
|
|
65
120
|
# Verify installations
|
|
66
121
|
RUN python3 --version && \
|
|
67
122
|
node --version && \
|
|
68
123
|
npm --version && \
|
|
69
124
|
bun --version
|
|
70
125
|
|
|
71
|
-
#
|
|
72
|
-
|
|
73
|
-
|
|
126
|
+
# Set up runtime container server directory
|
|
127
|
+
WORKDIR /container-server
|
|
128
|
+
|
|
129
|
+
# Copy built sandbox-container package
|
|
130
|
+
COPY --from=builder /app/packages/sandbox-container/dist ./dist
|
|
131
|
+
COPY --from=builder /app/packages/sandbox-container/package.json ./package.json
|
|
132
|
+
|
|
133
|
+
# Copy Python executor to runtime location
|
|
134
|
+
COPY --from=builder /app/packages/sandbox-container/src/runtime/executors/python/ipython_executor.py ./dist/runtime/executors/python/
|
|
74
135
|
|
|
75
|
-
|
|
136
|
+
# Copy production-only node_modules (excludes typescript, @types/*, etc.)
|
|
137
|
+
# Includes: @repo/shared, zod, esbuild (runtime dependencies)
|
|
138
|
+
COPY --from=prod-deps /app/node_modules ./node_modules
|
|
76
139
|
|
|
77
|
-
#
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
140
|
+
# Copy workspace packages so node_modules symlinks work
|
|
141
|
+
# @repo/shared and @repo/typescript-config are symlinked in node_modules
|
|
142
|
+
COPY --from=prod-deps /app/packages/shared ./packages/shared
|
|
143
|
+
COPY --from=prod-deps /app/tooling/typescript-config ./tooling/typescript-config
|
|
81
144
|
|
|
82
145
|
# Configure process pool sizes (can be overridden at runtime)
|
|
83
146
|
ENV PYTHON_POOL_MIN_SIZE=3
|
|
@@ -96,7 +159,8 @@ RUN mkdir -p /workspace
|
|
|
96
159
|
# Expose the application port (3000 for control)
|
|
97
160
|
EXPOSE 3000
|
|
98
161
|
|
|
99
|
-
#
|
|
162
|
+
# Copy and make startup script executable
|
|
163
|
+
COPY packages/sandbox/startup.sh ./
|
|
100
164
|
RUN chmod +x startup.sh
|
|
101
165
|
|
|
102
166
|
# Use startup script
|